SOC 2 Type II: Heroku
Every version of this statement in our record, newest first, each with the state it was recorded with and the source it was read from.
Current value
Yes
Observed 2026-09-02, last confirmed 2026-10-03, recorded in our database 2026-09-02.
Statement id st_11a93963ad2e5636d3e7
JSON
Change feed
Atom feed
On the product page
Record as of a date
This id stays the same when a new value supersedes the old one, when we withdraw the statement and when two duplicate entries are merged. Each version below keeps the state it was recorded with; today's confidence for the current value is on the product page. Not yet verified describes our research, never the product.
Versions
2 in our record since 2026-09-02-
Recorded 2026-09-02
Yes
Verifiedwww.heroku.com/compliance (Primary documentation), retrieved on 2 days: 2026-09-02, 2026-10-03...data processed by the Heroku Platform relevant for the financial reporting of customers. SOC2 Type 2 Security, Availability & Confidentiality Reports The restricted to use SOC2 Type 2 report...
Current version.
-
Recorded 2026-09-02
Not yet verified
Not yet verifiedwww.heroku.com (Primary documentation), retrieved 2026-09-02Superseded 2026-09-02 by the next version.
Changes attached to this statement
2-
2026-09-02 · First documented
Heroku: SOC 2 Type II documented (verified). This is a finding of ours, not necessarily a new certification.
-
2026-09-02 · Research update
Heroku: SOC 2 Type II is now recorded as not measured.